Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Search
Splunk Community
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Search
Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
1,647 results
Sort by:
05-11-2025
01:43 PM
Hi Everyone, Can you please suggest the recommended RF and SF number for Splunk clustered environment with total 9 indexers and 7 search heads in Indexer Clustering set-up. And also, p...
03-07-2025
12:24 AM
Hi, We have configured a data input in HF and there is an option to select index there. I have created new index in Cluster master and pushed it to indexers. But that created index is not s...
Labels
- Labels:
-
heavy forwarder
-
index
-
modular input
-
sourcetype
04-16-2024
01:12 AM
I am trying to build some modular documentation as a Splunk app on a site with a indexer- and search head cluster. Some of the reasoning behind this is that I spend quite some time r...
Labels
- Labels:
-
administration
-
configuration
12-16-2024
02:58 AM
...ithout ES and on all indexers via ClusterManager App. Then we set up all the inputs for the addon on the searchhead and could not select the index “M365” but only enter it manually. The problem now is t...
Labels
09-18-2024
01:07 PM
Hi, we are decomisioning our splunk infra, our company was purchased and the new management want to free resources :(. We have 3 search heads (stand alone) + 2 indexers (clustered). They ask me t...
- Tags:
- cluster
- stand alone
Labels
- Labels:
-
indexer clustering
07-17-2023
08:42 AM
Hi, we have an Indexer Cluster with a dedicated Cluster Manager. The indexers have an additional hard drive attached for the custom indexes. The cluster manager has only one hard disk. When a...
06-04-2024
12:53 PM
Hi, I just installed a index cluster and i already know that i shoud place Apps to $SPLUNK_HOME/etc/master-apps/ directoty at my manager node to distribute it accross all indexers but i have 2 q...
Labels
09-02-2022
01:11 PM
...ractice, poor judgement, or as intended.
We have 8 main indexers that do what indexers do, all clustered as peer nodes.
The deployment server is the master node and the search head for the cluster (w...
Labels
- Labels:
-
indexer clustering
Show results in replies (4)
-
...earch workload. Search head cluster and indexer cluster are two separate entities. So you don't h...
-
...ecause our index cluster has 8 indexers on our 192.x main network, 1 deployment/master node on the 192.x...
-
...oad of the other 8 indexers. Or am I misunderstanding and the DR indexer is there in case o...
-
Yes, there is an option for a cluster to be multisite. You can also migrate from a single site cluster...
10-20-2023
01:58 AM
Hi at all, I have to configure a multisite Indexer Cluster and I have a dubt: in the Splunk architectig course, the indicated Indexer Cluster replication port was 9100. Then reading Multisite Indexer...
Labels
- Labels:
-
indexer clustering
02-24-2023
08:10 AM
When one configures the indexer cluster for SmartStore, does each indexer get its own S3 bucket? Or is there just one very large S3 bucket and all indexers write into the same S3 bucket (s...
- Tags:
- S3 bucket
- smartstore
